Security Advisory

CVE-2026-15054

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-30 06:00:07

Last updated 2026-07-30 18:30:31

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The Bit Form WordPress plugin before 3.1.2 does not enforce a form's active/published status on its public form-submission handlers, allowing unauthenticated users to submit entries to, and fire the configured workflows (such as email notifications) of forms the site owner has deactivated or unpublished.

← Browse all CVEs View on cve.org ↗